summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFabien Sanglard <sanglardf@google.com>2017-02-02 20:20:13 +0000
committerandroid-build-merger <android-build-merger@google.com>2017-02-02 20:20:13 +0000
commit41ab86fb1fefe77fb48dda744eb621e4b77085de (patch)
tree33cfbca4a51394868464cb1d586878af65136481
parent81e84ad0721cda5a160bb13a0380a732622a590d (diff)
parentf91ee50667e8ce754b137de426d41e487aa1a2da (diff)
downloadnative-41ab86fb1fefe77fb48dda744eb621e4b77085de.tar.gz
Fix security vulnerability am: 45b202513b am: 8778a131c2 am: 18a5e5f607
am: f91ee50667 Change-Id: Ib4fad8fa8a393bc6233b842f0550db03708a65b1
-rw-r--r--services/surfaceflinger/SurfaceFlinger_hwc1.cpp3
1 files changed, 1 insertions, 2 deletions
diff --git a/services/surfaceflinger/SurfaceFlinger_hwc1.cpp b/services/surfaceflinger/SurfaceFlinger_hwc1.cpp
index b0f418c4fe..b32f652e83 100644
--- a/services/surfaceflinger/SurfaceFlinger_hwc1.cpp
+++ b/services/surfaceflinger/SurfaceFlinger_hwc1.cpp
@@ -2203,8 +2203,7 @@ void SurfaceFlinger::setTransactionState(
if (s.client != NULL) {
sp<IBinder> binder = IInterface::asBinder(s.client);
if (binder != NULL) {
- String16 desc(binder->getInterfaceDescriptor());
- if (desc == ISurfaceComposerClient::descriptor) {
+ if (binder->queryLocalInterface(ISurfaceComposerClient::descriptor) != NULL) {
sp<Client> client( static_cast<Client *>(s.client.get()) );
transactionFlags |= setClientStateLocked(client, s.state);
}